Privacy Policy

Expensio

Last Updated: May 2026

Expensio ("the App") is a personal finance management application designed to help you track expenses across multiple bank accounts and credit cards, manage budgets, and gain

insights into your spending habits. Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and how we protect it.

1. Information We Collect

a) Information You Provide

When you use Expensio, you may provide the following information voluntarily:

- Your name (used for personalization on the dashboard)

- Transaction details including amount, title, category, date, notes, and payment method

- Bank account information including account name, type, opening balance, and the last four digits of the account number (used for matching transactions from SMS notifications).

Expensio supports up to 3 bank accounts.

- Credit card information including card name, last four digits, card limit, billing date, and per-cycle usage. Expensio supports up to 5 credit cards.

- Optional brand tag on a transaction (e.g., "Zomato", "Amazon", "Zepto"). The brand tag is a short text label stored on the transaction row — Expensio is not affiliated with,

endorsed by, or connected to any of the listed brands.

- Budget limits (overall monthly and category-wise)

- App preferences such as currency, theme, and default payment method

b) Google Account Information (Optional)

Signing in with Google is optional and unlocks Google Drive backup. When you sign in, the App reads:

- Your Google account email, display name, and profile picture (from the Google Sign-In token) — used only to personalize the App and label your backups.

- Permission to a single folder named "Expensio" inside your own Google Drive (using the Drive "drive.file" scope, so the App can only see files it has created). The App cannot read

your other Drive files.

You can sign out at any time from Profile. Signing out clears the cached email and photo from your device but does not delete the Drive folder.

c) Information Collected Automatically

If you enable the "Auto-Capture Transactions" feature, the App reads incoming notifications from supported banking and payment apps to detect transaction details such as amount,

merchant name, and transaction type. Supported apps include SBI, ICICI, HDFC, Axis, Kotak, PNB, BoB, Amex, Yes Bank, IndusInd, IDFC, Federal, Canara, Union, IDBI, Paytm, PhonePe,

Google Pay, and CRED. This data is processed entirely on your device and is never transmitted to any external server.

The App does not collect device identifiers, IP addresses, location data, or any analytics or tracking information.

d) Information We Do NOT Collect

- Full credit card numbers, CVV, or expiry dates

- Bank account numbers or login credentials (only the last 4 digits, which you enter yourself, for SMS routing)

- UPI PINs or passwords

- Aadhaar, PAN, or any government-issued identification

- Biometric data

- Location or GPS data

- Contact lists, call logs, or SMS content (beyond notification-based auto-capture)

2. How We Use Your Information

All data you enter into Expensio is used solely to provide you with the App's core functionality:

- Displaying your income, expense, and balance summaries for the selected bank account or credit card

- Generating analytics, charts, and spending insights on the Insights tab

- Tracking budget usage and sending overspending alerts

- Managing credit card billing cycles, bill generation status, and payment tracking

- Showing monthly statements grouped by bank account or credit card

- Exporting your transactions as CSV for use in Excel or Google Sheets

- Backing up your data to a private "Expensio" folder in your own Google Drive whenever you add, edit, or delete data (only when you are signed in with Google)

- Displaying financial summaries on home screen widgets

We do not use your data for advertising, profiling, or any purpose beyond the functionality of the App. The brand-name list shown in the Brand picker is a static list bundled in the

App; we do not contact, query, or share data with any of those brands or their services.

3. Data Storage & Security

Primary storage is local. All your data lives on your device in a SQLite database (via Android Room) — no analytics server, no shared cloud backend, no user accounts you sign up

for.

If you choose to sign in with Google, the App can additionally back up a copy of your data to a folder named "Expensio" inside your own Google Drive. Key points:

- The backup is a single JSON file containing your transactions, accounts, cards, budgets, categories, and preferences. It is replaced each time and not duplicated.

- The backup is written using the Drive "drive.file" scope, which means the App can only see files it created. It cannot read or modify your other Drive files.

- The file lives entirely under your Google account. You can delete it at any time directly from drive.google.com.

- Restore is manual — when you tap "Restore from Google Drive", the App lists your backup files and you pick the one to restore. No data is overwritten without your explicit

confirmation.

- CSV exports are stored locally in your device's Downloads/Expensio folder.

Since most data resides on your device, the security of your data depends on your device's security measures (screen lock, encryption, etc.). We recommend keeping your device

secured with a PIN, pattern, or biometric lock.

4. Permissions

Expensio requests only the permissions necessary for its features:

- Notification Access — Required only if you enable "Auto-Capture Transactions" to read bank and payment notifications.

- Camera — Required only for credit card scanning (reads card name and last four digits using on-device text recognition).

- Storage — Required for saving CSV exports to your Downloads folder.

- Notifications — Required to show budget alerts, transaction confirmations, and spending warnings.

- Google Sign-In + Drive ("drive.file" scope) — Required only if you choose to back up to Google Drive. The Drive scope limits the App to files it creates inside the "Expensio"

folder in your own Drive.

All permissions are optional and the App functions without them (with reduced features).

5. Data Sharing

Expensio does not share, sell, rent, or transmit your personal or financial data to any third party. There are no analytics SDKs, ad networks, or tracking services integrated into

the App.

The only way your data leaves the App is when you explicitly choose to:

- Export a CSV file (stays on your device's Downloads folder)

- Back up to your own Google Drive when signed in

6. Data Retention & Deletion

Your data is retained on your device for as long as the App is installed. You have full control over your data at all times:

- Delete individual transactions from the home screen, or swipe left to delete them from within the account and card screens

- Use "Clear Transactions Only" in Profile to delete all transactions while keeping your accounts, cards, budgets, and settings intact

- Use "Reset All" in Profile to delete transactions, accounts, cards, budgets, and reset settings (default categories are preserved)

- Archive a bank account from Account Management to hide it and its transactions from the home screen. Archived accounts can be restored later.

- Uninstalling the App removes the local database from your device

- If you have a Google Drive backup, you can delete the "Expensio" folder from drive.google.com at any time to remove your backed-up copy

Once data is deleted locally and there is no backup, the data cannot be recovered.

7. Children's Privacy

Expensio is not directed at children under the age of 13. We do not knowingly collect personal information from children. The App is intended for use by individuals who manage their

own finances.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected within the App and on this page with an updated "Last Updated" date. Continued use of the App

after changes constitutes acceptance of the revised policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

Email: ozotea.opc@gmail.com